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Listing! of Claims 

This listing of claims replaces all prior versions;; .and 7 
listings, of claims in the application: 

1. (Previously Presented)! -A method comprising:; 
defining a key and a set of values, the key ablei to- be 

derived using the values and a predefined relationship, between. 

. ...... 

the values; 

sending a first value of the set, but not all of the values 
of the set and information encrypted using the key to a server, 
for storage; and 

sending a second value of the set, but not all of the 
values of the set to a first delegate, 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first of the values of the set 
absent the second of the values of the set, and 

inaccessible with the second of the values of the set 
absent the first of the values of the set, 

2. (Previously Presented) The method of claim 1 further 
comprising: 

generating a second set of values, the key being 
determinable by the values of the second set; 

sending a first but not all. of the values of the second set • 
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to the server; and 

sending a second but not all of the values of the second 
set to a second delegate, 

wherein the encrypted information is 

inaccessible with the £irst of the values of the 
second set absent the second of the values of the second set, 
and 

inaccessible with the second of the values of the 
second set absent the first of the values of the second set. 

3 . (Previously Presented) The method of claim 2 in which 
the values of the second set are also determinable- by the 
predefined relationship. 

4. (Original) The method of claim 1 in which the set 
includes exactly two values. 

5. (Original) The method of claim 1 in whictf the set 
includes three or more values . 

6. (Previously Presented) The method of claim 1 in which 
the first value is associated with a descriptor of the first 
delegate. 

7. (Previously Presented) The method of claim 1 in which 
the probability of guessing the key correctly using knowledge of 
one or more of the values of the set, but not all the values of 
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the set, is the same as the probability of guessing the key 
correctly using no knowledge of any value of the set. 

8. (Previously Presented) ;The method of claim 1 ' in which 
the predefined relationship comprises one or more of the Boolean 

XOR function and a relationship that applies an encryption 

■I • 
algorithm to one value of the set. using another value of the set 

i 

as the encryption algorithm key.; 

9. (Original) The method of claim 1 in which the 
information comprises medical information, 

10. (Previously Presented); A method comprising; 
storing, on a server accessible through a network, secured 

information and a first access component, access to the secured 
information requiring a key, the key able to be derived using 
the first access component, a second access component, and a 
relationship between the first and second access components; 

excluding both the key and the second access component from 
storage on the server; and 

providing the secured information and the first access 
component to a first requestor. ■ 

11. (Canceled) 

12. (Previously Presented) The method of claim 10 further 
comprising storing a third access component, on the server, the 
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third access component , when combined with a fourth access 
component that is excluded from storage on the server, being 
sufficient to permit access to the secured information. 

13. (Original) The method of claim 12 further comprising 
providing the secured information and the third access component 
to a second requestor* 

14. (Original) The method of claim 12 further comprising 
deleting the third access component in response to a trigger, 
the trigger being a client instruction, a time limit, a request 
from the. first requestor, or a security breach. 

15. (Original) The method; of claim 12 further comprising 
identifying the requestor and determining that the requestor 
requires the first access component but not the third access 
component . 

16. (Previously Presented) The method of claim 10 further 
comprising storing permission information about a party approved 
for access, such that the secured information and the first 
access component are only provided if the first requestor is the 
approved party* 

17. (Original) The method of claim 10 in which the 
secured information is secured by encryption using a key, and 
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the first and second access components are related to the key by 
a predefined relationship. 

18. (Previously Presented) A method con^risir^r^^:? 
receiving 

a) from a client, a first access cdmponent££* 

b) from a server accessible through a network/' /Secured 
information, access to the secured information requiring a key, 
the key able to be derived using! the first access component and 
a second access component/ arid 

c) from a source other 
the second access component, 

wherein the encrypted information is 
accessible with the key, 
inaccessible with the 
the second access component, anc 
inaccessible with the 
the first access component. 



0008 



than the client . or?. thee Server > 



19. (Original) The method 
is the server. 

20 . (Canceled) 
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21. (Original) The method of- claim 18 in which a third 
access component is required in addition to the first and second 
access components for use of the secured information. 

22. (Original) The method of claim 18 in which the 
secured information, the first access- component , and the second 
access component are received in a digital form. 

23. (Previously Presented) An article comprising a 
machine -readable medium that stores machine-executable 
instructions, the instructions being operable to cause a machine 
to : 

define a key and a set of values, the key able to be 
derived using the values and a predefined relationship between 
the values; 

send a first but not all of the values of the set and 
information encrypted using the key to a server for storage; and 

send a second but not all of the values of the set to a 
first delegate, 

wherein the encrypted information is 
accessible with the key, . 

inaccessible with the first of the values absent the 
second of the values, and 

inaccessible with the second of the values absent the 
first of the values. 
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24. (Previously Presentee!) The article of cladra. 23 In 
which the instructions further jj cause a machine to: . '-.}'•.'.<'!''. 

generate a second set of values, the key being 
independently determinable by tlhe- values of the secbh^:.: : 8et; . 

send a first but not all of the values of the ^ecpr^Vset to 
the server; and '■'■*■'.! ; 'V-C, \""v:'' ; \'/- 



send a second but not all j of the values of the^isecorid set 



to a second delegate, 

wherein the encrypted information is 

inaccessible with the first. of the values of; the 
second set absent the second of the values of the second set , 



w 
m 



, . ... 5 

and .!..'. '., J5 

inaccessible with the second of the values of the 

second set absent the first of ! the 'values of the second set.. O 



25. (Previously Presented) An apparatus comprising. a 
processor and instructions configured to cause the processor to: 
receive, from a client, information and a value of a set of 

i 

J • : ■ 

values, the information being encrypted using a key, the key 
able to be derived using the values of the set and a predefined 
relationship between the valued; 

store the information and! the value, but not all the values 

of the set; and :! 

i 

transmit, to a delegate, the information and the value. 
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26. (Original) The apparatus of claim 2 5 in which the 

• * • - *. 

software is further configured j to caused the processor to: 

store a second value that !is a member of a second set of 

i • • ' 

values, the values of the second set being sufficient to 

! : : i ■ " ! 

determine the key using the predefined relationship. 

I ': ; . 

.■ i . ■ • i 

• j ! 
■ i ' 

27, (Previously Presented) The apparatus of claim 26 in 
which the software is further Configured to Cause the processor 

i ' " • : " 

• • i ' ■ ! 

! i j' 

■ to: | . . 1 

■ i . . : 
i 

delete or deny access to the' 



second value in response to a 



trigger, the trigger being a client instruction, a time limit, a 

■ ! : • ' ! ! 

request from the delegate, or i security breach . 

! • 1 ! 

i • . * i . 

: ! 

28. (Original) The apparatus of claimj25 in which the 

J : • ; i 

information comprises medical information, j. 

'I - - ! . 1 
Claims 29-30. (Canceled).! 

I ! i 

! : J j 

31 (Previously Presented) The methods of claim 1 further 

. j ; . ■; j 

comprising sending, to the seriwnj, instructions for allowing the 
first delegate to access the fjlrtit of the values. 

32- (Previously Presented) ^The method' of claim 18, 
further comprising sending authentication information to the 
source other than the client ojr the Server tp access the second 
access component. 
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